Package Health/wearesho-team/wearesho-notifications-repository

wearesho-team/wearesho-notifications-repository

Usable with caveats: the package is licensed, documented, tested, and backed by its matching organization repository, but it has had no release or commit activity for nearly eight years. Its tiny user footprint and lack of a security policy add uncertainty for long-term maintenance.

Latest 1.1.0

Packagist

52%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases, all clustered in October 2018, with no releases in the last 12 months. This long period without published updates is a meaningful maintenance and compatibility concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in October 2018. That strongly suggests the project is no longer actively maintained.

Repo popularity

The repository has zero stars and forks and only two watchers. Popularity is not required for a healthy package, but this provides little evidence of active community use or external review.

Repository archived

The repository is not archived, which leaves room for future maintenance, but its last push was nearly eight years ago and does not offset the inactivity shown by repo_commit_activity.

Security policy

No security policy was found in the repository. For a library that handles authorization tokens and notification delivery, this is a transparency gap, although it is not evidence of malicious behavior.